PLATFORM TOPOLOGY · AGENCY PRODUCT LINE · V5.5

From Spark prototype
to Ashlight composition.

One first-party project ZIP enters staging. Agency discovers every file, records asset provenance, rebuilds the native runtime, qualifies optional renderer branches, and prepares a Director-approved release. The manifest—not the chat transcript—is the shared spine.

INTAKE CONTRACTZIP → MANIFESTBrowser-local, real hashes

ASSET SOVEREIGNTYORIGINAL FIRSTSeparate source + derivatives

DEMO GAMES03 / 031 source exemplar + 2 2D fixtures

HOST SERVICECHECKING DIRECTOR RECEIVERPrivate intake + browser build; promotion pending

01 / END-TO-END TOPOLOGY

Authority, data and delivery flow

Hover or select stages for their contracts

DIRECTOR · HUMAN AUTHORITYYOUR SPARK GAMESGenerate and iterate upstreamZIP handed over by Director

→

ORIGIN · GEMINI / SPARKORIGINAL ZIPPassive source artifact thereafterNo dependency on future Gemini access

→

ASHLIGHT · QUARANTINEINTAKE + INVENTORYSafe paths · SHA-256 · asset IDsOriginal bytes remain unchanged

→

AGENCY · BOUNDED SKILLSGAME PROFILES + PREFLIGHTNative runtime → optional adaptersWorker receipts and evidence

→

DIRECTOR · PROMOTIONSTAGED RELEASEGallery + catalogue + pathsImmutable → publish / rollback

Execution stages

Click to inspect contract

Intake contract

REFERENCE

02 / OPERATING DOCTRINE

Four agents. One Director. One receipt chain.

00 / DIRECTOROrchestration & approval

Authors the games, grants capabilities, accepts build evidence, and alone promotes a public release.

01 / ORIGIN AGENTSpark creation · source only

Generated the original export upstream. Once handed over, Ashlight operates without further Gemini dependency.

02 / BUILDER AGENTCompiler & native parity

Runs supported first-party source adapters in the authenticated browser; external workers optional.

03 / PRIMARY AGENTAsset steward & integrator

Inspects imports, maintains path-aware manifests, catalogue, snippet lab and architecture.

04 / PRINCIPAL POST AGENTServer-side authorised liaison

May propose or perform bounded POST operations on a connected service, never arbitrary execution or silent promotion.

This page is a genuine local ZIP inspector and interactive architecture reference, not yet a server pipeline. Native compilation, cPanel upload, hosted previews and agent sessions require separately authorised backend services.

02 / SOURCE ARRIVAL

ZIP intake & quarantine.

Drop your original first-party Spark ZIP once. Browser verification is followed by a private server intake when the Director is signed in; no uploaded code is executed or publicly released.

Focus Director / unified authority

CHECKING AGENCY IDENTITY

Game Factory no longer has a second password. The existing signed Focus Director session is verified by the same server parser used by Focus and Composer before any private project read, ZIP write or workspace action. No separate login is required. The host must have its real api/common.php verifier available.

VERIFY EXISTING DIRECTOR SESSIONASHLIGHT SYSTEMS HOME ↗

Authority has not been verified. Browser-only inspection remains usable without server access.

First-party integration: the Factory uses the signed Focus session and the existing /api/common.php parser. Only real server-verification enables file writes; browser flags and the operator master key are not accepted.

⇩

DROP PROJECT.ZIP

Or click to select. Browser inspection, hashing, safe path checks, media previews and receipts.

ZIP ONLY · ≤ 60 MiB archive · ≤ 2,000 entries · ≤ 120 MiB expanded

PROJECT ID

ORIGIN / PROVENANCE

READY FOR ZIP0%

An original ZIP is required for a complete intake receipt. You can also load the built-in demonstration fixture.

Staging contract

LOCAL V2

staging/<project-id>/<intake-hash>/
├── original/
│   └── project.zip          # unchanged bytes
├── extracted/
│   └── ...                  # validated source paths
├── canonical/
│   └── assets/...           # reversible mappings
├── manifests/
│   ├── rebuild-manifest.json
│   ├── assets.json
│   ├── file-inventory.json
│   └── receipt-chain.json
└── outputs/
    ├── native/              # needs runner
    ├── variants/            # optional
    └── standalone/          # last, optional

Security: reject traversal paths, encrypted archives, symlinks, oversized ZIPs and unsupported formats. Never evaluate JS from an uploaded archive during inspection.

LIVE / SESSION EVIDENCE

Detected project inventory

FILES—Checked archive entries

MEDIA ASSETS—Detected independent resources

SOURCE SIZE—Expanded, bounded

RUNTIME—Heuristic · requires QA

Processing receipts

Only completed local work is labelled COMPLETE

No intake executed. Build and promotion stages are not connected.

03 / INTERNAL ASSET MANAGER

Asset gallery.

Every original remains traceable to its source path. Browse images, backgrounds, sprite atlases, audio, models, code-generated FX and their separately named derivatives.

Persistent Agency project gallery

SERVER COLLECTION

Browse media by game, category and source filename. Only Director-authorised projects appear. Source revisions can be inspected independently; original media and hashes remain unchanged. Audio visualization starts only when you play a selected track. Legacy FX and demo content are separate below.

SELECT GAME / REVISION TO BROWSEIDENTICAL HASHES FLAGGED · ORIGINALS UNCHANGED

CURRENT BROWSER INSPECTION

Temporary session assets

0 ASSETS

Selected asset

Paths, SHA-256 and provenance

Select an asset to inspect its immutable source record and canonical destination.

04 / REUSABLE SNIPPET SURFACES

Animation & FX lab.

Legacy authored experiments (kept separately from imported project assets). Procedural effects can become first-class assets: executable recipes with renderer, parameters, seeds and licensing/provenance—not mystery code pasted into games. This is an isolated Ashlight-authored Canvas 2D lab; a Three.js/WebGPU adapter can follow.

SANDBOX: CANVAS 2DREADY

FX specimen selector

Procedural / reproducible

INTENSITY 60SPEED 1.0×COLOUR FAMILY

FX recipes become asset-manager entries with generator ID and deterministic parameters. They do not claim to be extracted from a Spark ZIP.

05 / FIRST-PARTY GAME CATALOGUE

Games, proofs & provenance.

Imported projects appear as staged entries after private intake. Existing Quantum Sweeper and two original Ashlight 2D fixtures are preserved as legacy references until the real native builder generates verified replacements.

Imported Director projects

SERVER STAGING

These cards are automatically generated from real saved intake receipts. Private source and build artifacts are stored separately. The browser build chamber compiles supported original source using Factory-hosted compiler libraries, not PHP. The existing external worker remains optional. V5.5 imports hash-bound QA evidence but does not grant publication or gameplay parity. Director can import a compiled ZIP for sandboxed private QA; publication and agent access still require separate grants and approvals.

Authenticate the Director session to see persistent first-party imports.

LEGACY ACCEPTANCE FIXTURES

V2 reference games

◈⌗◈⌗◈⌗◈⌗◈

QUANTUM
SWEEPER

REFERENCE EXEMPLAR

Quantum Sweeper

Preserved 2D React / Canvas standalone produced through Claude's seven-step reconstruction. Source project ZIP still required for complete provenance.

REACT · CANVAS 2DSTANDALONE

PLAY EXEMPLAR ↗

SIGNAL
SWEEP

ASHLIGHT FIXTURE 01

Signal Sweep

Original input, timing, Canvas drawing, state and receipt export. Tests the hosted game folder without relying on external builders.

VANILLA JS · CANVAS 2DPLAYABLE

PLAY TEST ↗

ION
INTERCEPT

ASHLIGHT FIXTURE 02

Ion Intercept

Original arcade projectile, debris, spawn and audio-trigger experiment. A small 2D harness for catalogue, preview and effects testing.

VANILLA JS · CANVAS 2DPLAYABLE

PLAY TEST ↗

The game cards are catalogue entries for this package—not evidence that an automated Agency builder or staging service already ran. Intake-generated game cards will require successful native rebuild and acceptance receipts.

08 / AGENCY WORKSPACE PROFILES

Each game becomes a working room.

Game profiles are retained across revisions and link back to their private source intakes. The Director can leave notes, plan assignments and rotate work in future AGS sessions. An assignment here is a proposal, not an agent command or capability grant.

Verified game workspaces

FOCUS DIRECTOR REQUIRED

0 PRIVATE PROFILES

Sign into the existing Ashlight Director system, then reconnect the verified bridge. The workspaces will load here.

Director workspace desk

FIRST-PARTY / PLANNING ONLY

STAGED GAMESPACE TIER

Space tiers are advisory only. ZIP intake already creates the game record automatically. ENSURE simply reopens/reuses it; no new AGS identity, enforced quota, file duplication or lease is created.

DIRECTOR NOTE

FUTURE AGENT ROLEMISSION TITLE

Game-workspace messages and assignments are stored privately once authorised. Agent execution, asynchronous posting, mission rotation and swarm collaboration require explicit future AGS integration.

Selected game record

NO PROFILE SELECTED

Choose a staged game to view its workroom.

09 / DIRECTOR · PRIVATE RECOVERY

Storage & recovery.

Export your private Factory, verify it locally, test a real file-by-file restore in quarantine, and optionally clear the active catalogue with a reversible Director-approved reset. No physical data purge or publication is enabled.

Managed private storage

DIRECTOR READ · LIVE INVENTORY

Select REFRESH STORAGE INVENTORY to inspect the private Factory record.

VERIFY THE DOWNLOADED ZIP LOCALLY (NO UPLOAD)

Choose the downloaded recovery ZIP to check its manifest, file count, file bytes and SHA-256 integrity in this browser. Files never leave your computer.

No recovery export downloaded during this browser session.

Restore drill and reversible reset

V5.6B · DIRECTOR ONLY · NO PHYSICAL PURGE

First verify your downloaded recovery ZIP above. Then optionally upload that same ZIP in 1 MiB chunks into a private quarantine, where the server reconstructs and checks every file before offering restore or reset. A completed download alone never unlocks reset.

No server-side restore drill completed in this browser session. The current Factory remains untouched.

Reversible clean start

A validated backup must match the CURRENT live Factory bytes. Reset archives staging/, profiles/, and workspaces/ into protected private storage and clears the active catalogue. It does not remove application files, Focus credentials, or historical archive data.

Confirm exact words: ARCHIVE AND RESET

Disk space is NOT freed. Physical purge stays locked until separate recovery and live-host acceptance.

Bring old games back

Checking whether the active catalogue is empty…

To undo reset: UNDO RESET

No reset receipt loaded.

To restore verified backup: RESTORE VERIFIED BACKUP

Restore is blocked if any active games are present; it never silently overwrites new work.

V5.6B · EXPORT & DRILL

Immutable lineage, portable backup

Archive includes all managed Factory staging files, game profiles/covers and workroom profiles. A manifest and per-file SHA-256 checksums are included. The server rereads the assembled ZIP and verifies each entry before download.

All private files are still retained after export. Use the included offline verification script against the downloaded ZIP before relying on it.

PHYSICAL PURGE · LOCKED

Archive now, purge later

Server-side restore from the downloaded backup is tested into quarantine, then it may be activated only into empty managed storage. Active reset is reversible and retains the old managed files until a separately approved destruction pass.

V5.6B is a recovery and reversible clean-start milestone, not a server disk-reclamation mechanism.

06 / SHARED RECEIPT SPINE

Paths, receipts & manifests.

Agents exchange durable evidence instead of reconstructing project state from a conversation. All auto-generated hashes are computed from actual bytes; never use example hashes as verification.

Rebuild manifest

Canonical directory

FOLDER FIRST

A monolithic HTML is generated only as an optional downstream product, after original runtime equivalence and asset completeness have been established.

07 / HOSTED PRODUCT & AUTHORITY

Staging, agents & promotion.

The hosted workbench can inspect files locally. The private receiver and workspace endpoints are accessible only after real Focus Director session verification. Principal POST capability grants do not imply publish permission.

DELIVERABLE TODAY

Static Ashlight Factory

Hosted folders with game previews, immutable reference specimen, responsive topology, local ZIP introspection, manifests, and FX Lab.

Deploy ZIP contents to an isolated static path
Open the factory over HTTPS
Inspect ZIPs in browser without server upload
Download an Agency staging package

V4 PRIVATE RECEIVER

Authenticated staged intake

V4 retains a PHP receiver gated by a signed Focus Director session capability that stores original ZIPs and extracted assets privately. Supported React/TSX and standalone HTML sources can compile in the browser; unrecognised formats require separate adapters or workers.

POST api/index.php?action=upload guarded by verified AGS Director identity + CSRF
Quarantine outside public web root
Resource quotas, malware/ZIP checks, no PHP execution
SHA-256 preserved original + server stage receipts; browser-native builds supported for known formats

FUTURE AGENCY GRANTS

Bounded POST agent

A designated principal reads stage manifests and proposes build operations. The server validates explicit verbs and returns receipts, not free-form shell authority.

Read manifest and tool capability schema
Request native rebuild or QA task
Read preview, diff and test receipts
Director-only promote / rollback

CANONICAL SKILL CHAIN

From original source to release

**Ownership & future scope:** this phase handles only games authored or authorised by the Director for Ashlight. Public third-party ZIP conversion, contributor permissions, GitHub commons and external licences are explicitly deferred. An imported ZIP is always treated as untrusted executable source, regardless of claimed ownership.

Public preview / private staging split

DESIGN CONTRACT

/agency/game-factory/          # this static web app
/agency/game-factory/releases/<release>/     # Director-approved static preview
/ashlight-agency-private/game-factory-v3/staging/<game>--<hash>/       # NOT web accessible
/ashlight-agency-private/game-factory-v3/archive/<hash>/       # immutable source + receipts
/ashlight-agency-private/game-factory-v3/worker-queue/         # sandboxed build service (future)

GET  api/index.php?action=project&id=...   # auth required
POST api/index.php?action=upload          # implemented with Director + CSRF
POST /api/agency/commands                # future separate authorised agent
POST /api/agency/promote                 # future, Director-only

From Spark prototypeto Ashlight composition.